Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/b98a5a55-9dbc-37e4-9808-2c8ca8c4cfac.roa
File: b98a5a55-9dbc-37e4-9808-2c8ca8c4cfac.roa (raw, json)
Hash identifier: 4Cnqtgj11Gz+4UsCa0MNmTB5rKT09pZz9R6N3XA5+Ss=
Subject key identifier: 45:1D:AD:4F:18:DA:4F:99:4D:01:AC:89:23:73:D5:BD:9C:D2:10:63
Certificate issuer: /CN=5387bf04-58cb-48fb-ac16-4936ae99bfe8
Certificate serial: 010D0C9F4328583D668F9F5F1A11002A32B1E250
Authority key identifier: F5:B2:27:36:05:07:17:BE:91:E5:39:21:38:2C:58:5F:42:C1:4E:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/b98a5a55-9dbc-37e4-9808-2c8ca8c4cfac.roa
Signing time: Tue 22 Mar 2022 04:00:00 +0000
ROA not before: Tue 22 Mar 2022 04:00:00 +0000
ROA not after: Mon 22 Mar 2032 04:00:00 +0000
asID: 6653
IP address blocks: 68.64.208.0/20 maxlen: 24
216.98.192.0/20 maxlen: 24
216.241.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:8f:9f:5f:1a:11:00:2a:32:b1:e2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5387bf04-58cb-48fb-ac16-4936ae99bfe8
Validity
Not Before: Mar 22 04:00:00 2022 GMT
Not After : Mar 22 04:00:00 2032 GMT
Subject: CN=88fef765-5db8-48ed-8892-39b48451d292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d1:5d:f1:e8:4a:ee:bf:a1:b0:d8:30:dc:af:
d8:84:e9:f1:b1:91:95:e0:6a:2e:83:58:d6:60:cc:
e2:9f:a7:7e:c0:e0:d7:9b:6e:41:07:50:d1:02:30:
ac:35:01:1b:a7:0e:72:64:43:c6:41:1d:57:54:1d:
e4:51:16:29:02:b9:25:dc:7e:83:55:1b:82:9b:b6:
5a:4f:6e:7d:1b:dd:b0:18:70:2f:a8:0e:bb:14:62:
5c:13:92:ca:fa:ca:78:25:2b:78:58:4a:c9:af:b5:
85:79:02:16:7b:1f:5b:7f:26:04:1b:04:eb:4c:c1:
ea:16:f1:31:ee:40:32:e5:1f:73:d0:9b:7b:a1:1a:
93:9d:4e:40:b2:ed:08:b4:d2:45:86:9e:f1:d8:ce:
15:8f:19:dc:90:e5:cf:6a:fe:db:c1:2c:23:d8:62:
28:1e:f7:86:a6:32:51:f7:b2:18:80:2d:67:a8:65:
74:16:90:39:53:5a:cd:59:24:7d:0e:f1:c5:55:f7:
37:89:37:da:17:89:85:c5:ab:4e:10:49:cc:fd:9e:
78:89:58:7d:45:21:23:4c:47:2e:bf:77:c0:b9:66:
2b:a1:5e:c8:7e:9d:c2:0b:5e:d2:7a:aa:1b:8d:b0:
d7:fb:83:ba:f9:e1:b5:9c:d9:30:d2:15:b0:97:33:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:AD:4F:18:DA:4F:99:4D:01:AC:89:23:73:D5:BD:9C:D2:10:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/b98a5a55-9dbc-37e4-9808-2c8ca8c4cfac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8/5387bf04-58cb-48fb-ac16-4936ae99bfe8.crl
X509v3 Authority Key Identifier:
keyid:F5:B2:27:36:05:07:17:BE:91:E5:39:21:38:2C:58:5F:42:C1:4E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5387bf04-58cb-48fb-ac16-4936ae99bfe8.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.208.0/20
216.98.192.0/20
216.241.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:ad:39:e4:96:ed:a4:62:99:d9:22:d7:eb:f3:76:b8:05:53:
fe:96:7c:32:7a:6d:9e:32:62:c7:a9:83:97:c7:f4:e2:7d:69:
f1:98:e2:76:92:3d:d5:72:8a:f3:85:89:bf:9b:12:c0:8c:8e:
ba:53:9b:12:85:a3:58:8e:41:5f:31:d0:23:76:79:c9:7e:a7:
f6:a9:93:56:66:b4:75:a5:5a:7f:a5:d1:0e:28:5b:fc:e1:9f:
c0:0f:78:ef:04:07:f9:20:a1:bb:4e:62:b6:9d:4c:74:10:79:
f3:df:52:f7:78:55:1f:a5:61:9e:78:fb:89:e5:bb:c0:8f:0a:
a8:a2:f9:83:4d:0c:ae:40:99:d2:ea:ce:63:9e:b0:43:17:26:
db:33:d1:f1:5f:ac:f5:2c:23:70:a5:e7:d4:39:d3:ba:b0:bc:
c8:c5:8c:9b:fd:f1:7e:c5:b3:b0:91:ab:b4:be:16:bf:28:cc:
00:0f:0a:7c:65:90:38:6c:ff:22:3a:42:df:f8:b6:b8:ee:65:
f5:7d:bd:32:b4:15:15:17:3e:c3:d4:07:62:a9:1b:13:7a:83:
b3:41:b6:38:53:9b:5a:43:37:aa:4e:04:17:7d:f4:aa:fa:49:
cc:c2:a1:4c:0e:30:2c:80:68:29:15:b2:67:29:c7:68:59:ae:
22:06:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:57 2024 by rpki-client on console-fra.rpki-client.org